$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/8cc71e70-5027-36bf-928c-5e9cbf598a0f.roa File: 8cc71e70-5027-36bf-928c-5e9cbf598a0f.roa (raw, json) Hash identifier: sbTXcpJz9aKxvhZZGCH6nB2d9MAwAfw2WU1a9jxeJoI= Subject key identifier: 99:B2:04:D3:C2:DD:6D:F6:95:5B:14:EE:08:3D:89:9C:A2:3A:49:46 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584BB02D040B2322A629BC080EC0 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/8cc71e70-5027-36bf-928c-5e9cbf598a0f.roa Signing time: Thu 30 Oct 2025 01:00:30 +0000 ROA not before: Thu 30 Oct 2025 01:00:30 +0000 ROA not after: Wed 28 Jan 2026 02:00:30 +0000 asID: 54113 IP address blocks: 131.125.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b0:2d:04:0b:23:22:a6:29:bc:08:0e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Oct 30 01:00:30 2025 GMT Not After : Jan 28 02:00:30 2026 GMT Subject: CN=596adf33-b658-488e-98f6-a924b572a135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:74:5a:eb:97:11:94:90:6e:0d:5f:f6:41:99: ef:4a:99:68:43:d9:ce:d2:1b:a2:bf:db:1c:c1:18: 45:05:92:58:e7:94:ca:ff:1e:99:52:65:8f:bc:92: 3e:20:dc:ea:61:d8:ba:38:45:d3:07:48:99:d2:2d: 18:5a:6d:4d:30:c5:2a:9f:a3:6b:16:04:4c:55:9c: 72:d7:c2:b9:a1:72:51:20:1d:0f:b6:ba:e5:2a:11: fd:94:7b:55:85:61:7d:07:63:02:b3:90:d9:27:f2: ab:54:ec:ff:57:b3:67:2f:6c:a3:c4:35:a5:a3:92: 7a:5a:78:3a:4f:f0:ee:54:dc:10:bf:69:5e:b6:ba: 93:e7:b0:f3:bf:e8:b1:3a:aa:69:66:2c:52:a8:b2: c0:98:c9:b9:cb:9e:52:96:46:d8:9e:d9:89:8f:b1: 17:16:f5:88:38:1e:13:8a:1a:82:40:2c:3c:55:cd: 78:b1:6a:e8:68:66:d9:f7:af:02:00:8f:93:56:c6: 9f:df:a8:82:3c:85:53:4f:9c:6c:f2:f0:39:c5:02: 8c:b1:0f:a5:0d:a1:1a:82:5c:ec:21:f2:cf:8e:47: 18:87:23:36:53:e3:23:cc:25:1c:aa:dd:59:53:63: 27:2a:9a:ec:f6:f7:20:a8:b8:a1:29:b3:1f:2b:ea: 5d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:B2:04:D3:C2:DD:6D:F6:95:5B:14:EE:08:3D:89:9C:A2:3A:49:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/8cc71e70-5027-36bf-928c-5e9cbf598a0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:36:99:c4:7f:04:12:44:6e:22:90:d3:98:c0:f9:f8:e4:a9: 05:f5:14:e1:34:94:24:bc:38:62:68:4b:4e:55:a8:f1:ea:51: 64:fc:b0:f6:e8:27:d7:98:1c:98:1f:18:29:be:12:ce:54:54: 98:0a:14:de:1d:a9:4a:7c:0f:e8:ed:83:76:3d:4a:0a:44:aa: cf:4d:15:ef:70:e3:83:0d:4d:df:5a:95:1c:ad:bd:f8:24:fe: ee:a3:a1:01:7e:57:49:ed:52:b3:ae:93:17:cc:0e:09:17:5a: c9:5a:af:68:fc:42:08:e4:e4:92:e9:d6:e5:5a:79:68:da:cb: 36:ed:8b:70:1c:52:a8:2e:c4:79:86:45:49:c6:79:da:89:6d: e2:3f:78:99:a8:83:52:3b:4d:68:54:17:e3:64:63:ad:fa:e3: b2:ce:86:e0:74:5f:40:b6:eb:69:68:c2:c1:12:1c:a4:8a:80: d8:df:30:da:fd:79:a8:fc:c2:64:99:ee:83:d3:9e:30:b0:15: 11:83:b4:de:18:83:b7:6a:b1:4a:90:42:93:4b:83:2e:b7:7c: 76:9f:0e:94:eb:27:06:6e:fc:bf:46:8b:96:c6:b0:4a:49:93: 6c:37:66:52:72:10:55:79:3c:66:d3:06:36:3e:d0:e0:30:82: d9:9e:c7:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuwLQQLIyKmKbwIDsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MTAzMDAxMDAzMFoXDTI2MDEyODAyMDAzMFowLzEtMCsGA1UEAxMk NTk2YWRmMzMtYjY1OC00ODhlLTk4ZjYtYTkyNGI1NzJhMTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnRa65cRlJBuDV/2QZnvSploQ9nO0huiv9sc wRhFBZJY55TK/x6ZUmWPvJI+INzqYdi6OEXTB0iZ0i0YWm1NMMUqn6NrFgRMVZxy 18K5oXJRIB0PtrrlKhH9lHtVhWF9B2MCs5DZJ/KrVOz/V7NnL2yjxDWlo5J6Wng6 T/DuVNwQv2letrqT57Dzv+ixOqppZixSqLLAmMm5y55SlkbYntmJj7EXFvWIOB4T ihqCQCw8Vc14sWroaGbZ968CAI+TVsaf36iCPIVTT5xs8vA5xQKMsQ+lDaEaglzs IfLPjkcYhyM2U+MjzCUcqt1ZU2MnKprs9vcgqLihKbMfK+pd2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJmyBNPC3W32lVsU7gg9iZyiOklGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvOGNjNzFlNzAtNTAyNy0z NmJmLTkyOGMtNWU5Y2JmNTk4YTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg31sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHo2mcR/BBJEbiKQ05jA+fjkqQX1FOE0lCS8OGJoS05VqPHqUWT8sPbo J9eYHJgfGCm+Es5UVJgKFN4dqUp8D+jtg3Y9SgpEqs9NFe9w44MNTd9alRytvfgk /u6joQF+V0ntUrOukxfMDgkXWslar2j8Qgjk5JLp1uVaeWjayzbti3AcUqguxHmG RUnGedqJbeI/eJmog1I7TWhUF+NkY63647LOhuB0X0C262lowsESHKSKgNjfMNr9 eaj8wmSZ7oPTnjCwFRGDtN4Yg7dqsUqQQpNLgy63fHafDpTrJwZu/L9Gi5bGsEpJ k2w3ZlJyEFV5PGbTBjY+0OAwgtmex4s= -----END CERTIFICATE-----Generated at Wed Nov 5 00:45:27 2025 by rpki-client